
4Contents
Single IP Management . . . . . . . . . . . . . . . 58
Automatic Firmware Update for New Stack M
embers . . . . . . . . . . . . . . . . . . . . . . . 58
Master Failover with Transparent Transition . . . . 59
Nonstop Forwarding on the Stack . . . . . . . . . 59
Hot Add/Delete and Firmware
Synchronization . . . . . . . . . . . . . . . . . . . 59
Security Features . . . . . . . . . . . . . . . . . . . . 59
Configurable Access and Authentication
Profiles . . . . . . . . . . . . . . . . . . . . . . . 59
Password-Protected Management Access . . . . 60
Strong Password Enforcement . . . . . . . . . . . 60
TACACS+ Client . . . . . . . . . . . . . . . . . . . 60
RADIUS Support . . . . . . . . . . . . . . . . . . 60
SSH/SSL. . . . . . . . . . . . . . . . . . . . . . . 61
Inbound Telnet Control . . . . . . . . . . . . . . . 61
Denial of Service . . . . . . . . . . . . . . . . . . 61
Port Protection . . . . . . . . . . . . . . . . . . . 61
Captive Portal . . . . . . . . . . . . . . . . . . . . 62
Dot1x Authentication (IEEE 802.1X) . . . . . . . . . 62
MAC-Based 802.1X Authentication . . . . . . . . . 62
Dot1x Monitor Mode . . . . . . . . . . . . . . . . 63
MAC-Based Port Security . . . . . . . . . . . . . 63
Access Control Lists (ACL) . . . . . . . . . . . . . 63
Time-Based ACLs . . . . . . . . . . . . . . . . . . 64
IP Source Guard (IPSG). . . . . . . . . . . . . . . 64
DHCP Snooping . . . . . . . . . . . . . . . . . . . 64
Dynamic ARP Inspection . . . . . . . . . . . . . . 64
Protected Ports (Private VLAN Edge). . . . . . . . 65
Switching Features . . . . . . . . . . . . . . . . . . . 65
Flow Control Support (IEEE 802.3x) . . . . . . . . . 65
Head of Line Blocking Prevention . . . . . . . . . 65
Alternate Store and Forward (ASF). . . . . . . . . 65